Go/github.com/nuclio/nuclio CVE-2026-52833: high 8, EPSS 0.55%

Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

Action: Upgrade github.com/nuclio/nuclio to 1.16.5 or later.

go get github.com/nuclio/nuclio@v1.16.5

Affected

Fixed versions

Sources

• osv: GHSA-3v79-m2cg-89ww
• https://github.com/nuclio/nuclio/security/advisories/GHSA-3v79-m2cg-89ww
• https://github.com/nuclio/nuclio/pull/4149
• https://github.com/nuclio/nuclio/commit/4c78040c759068e927f3ed7c6507543c15d4ae56
• https://github.com/nuclio/nuclio
• https://github.com/nuclio/nuclio/releases/tag/1.16.5

CVE-2026-52833 · published 2026-07-16T19:40:53Z · modified 2026-07-21T19:18:54.329479600Z · JSON